forked from spujadas/elk-docker
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
194 lines (148 loc) · 6.98 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
# Dockerfile for ELK stack
# Elasticsearch, Logstash, Kibana 6.3.0
# Build with:
# docker build -t <repo-user>/elk .
# Run with:
# docker run -p 5601:5601 -p 9200:9200 -p 5555:5555 -it --name elk <repo-user>/elk
FROM phusion/baseimage:master
MAINTAINER Brian Whitney brian.m.whitney@outlook.com
ENV REFRESHED_AT 2018-09-19
###############################################################################
# INSTALLATION
###############################################################################
### install prerequisites (cURL, gosu, JDK, tzdata, tor)
ENV GOSU_VERSION 1.10
ARG DEBIAN_FRONTEND=noninteractive
RUN set -x \
&& apt-get update -qq \
&& apt-get install -qqy --no-install-recommends ca-certificates curl \
&& apt-get install -qqy tor \
&& rm -rf /var/lib/apt/lists/* \
&& curl -L -o /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \
&& curl -L -o /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \
&& export GNUPGHOME="$(mktemp -d)" \
&& gpg --keyserver hkp://ha.pool.sks-keyservers.net:80 --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
&& chmod +x /usr/local/bin/gosu \
&& gosu nobody true \
&& apt-get update -qq \
&& apt-get install -qqy openjdk-8-jdk tzdata golang \
&& apt-get clean \
&& set +x
ENV ELK_VERSION 6.4.1
### install Elasticsearch
ENV ES_VERSION ${ELK_VERSION}
ENV ES_HOME /opt/elasticsearch
ENV ES_PACKAGE elasticsearch-${ES_VERSION}.tar.gz
ENV ES_GID 991
ENV ES_UID 991
ENV ES_PATH_CONF /etc/elasticsearch
ENV ES_PATH_BACKUP /var/backups
RUN mkdir ${ES_HOME} \
&& curl -O https://artifacts.elastic.co/downloads/elasticsearch/${ES_PACKAGE} \
&& tar xzf ${ES_PACKAGE} -C ${ES_HOME} --strip-components=1 \
&& rm -f ${ES_PACKAGE} \
&& groupadd -r elasticsearch -g ${ES_GID} \
&& useradd -r -s /usr/sbin/nologin -M -c "Elasticsearch service user" -u ${ES_UID} -g elasticsearch elasticsearch \
&& mkdir -p /var/log/elasticsearch ${ES_PATH_CONF} ${ES_PATH_CONF}/scripts /var/lib/elasticsearch ${ES_PATH_BACKUP} \
&& chown -R elasticsearch:elasticsearch ${ES_HOME} /var/log/elasticsearch /var/lib/elasticsearch ${ES_PATH_CONF} ${ES_PATH_BACKUP}
ADD ./elasticsearch-init /etc/init.d/elasticsearch
RUN sed -i -e 's#^ES_HOME=$#ES_HOME='$ES_HOME'#' /etc/init.d/elasticsearch \
&& chmod +x /etc/init.d/elasticsearch
### install Filebeat
#ENV FILEBEAT_VERSION ${ELK_VERSION}
#ENV FILEBEAT_HOME /opt/filebeat
#ENV FILEBEAT_PACKAGE filebeat-${FILEBEAT_VERSION}-linux-x86_64.tar.gz
#ENV FILEBEAT_GID 992
#ENV FILEBEAT_UID 992
#ENV FILEBEAT_PATH_CONF /etc/filebeat
#RUN mkdir ${FILEBEAT_HOME} \
# && curl -O https://artifacts.elastic.co/downloads/beats/filebeat/${FILEBEAT_PACKAGE} \
# && tar xzf ${FILEBEAT_PACKAGE} -C ${FILEBEAT_HOME} --strip-components=1 \
# && rm -f ${FILEBEAT_PACKAGE} \
# && groupadd -r beat -g ${FILEBEAT_GID} \
# && useradd -r -s /usr/sbin/nologin -d ${FILEBEAT_HOME} -c "Filebeat service user" -u ${FILEBEAT_UID} -g beat beat \
# && mkdir -p /var/log/filebeat ${FILEBEAT_PATH_CONF}/conf.d \
# && chown -R beat:beat ${FILEBEAT_HOME} /var/log/filebeat ${FILEBEAT_PATH_CONF}
#ADD ./filebeat-init /etc/init.d/filebeat
#RUN sed -i -e 's#^FB_HOME=$#FB_HOME='$FILEBEAT_HOME'#' /etc/init.d/filebeat \
# && chmod +x /etc/init.d/filebeat
### install Logstash
#ENV LOGSTASH_VERSION ${ELK_VERSION}
#ENV LOGSTASH_HOME /opt/logstash
#ENV LOGSTASH_PACKAGE logstash-${LOGSTASH_VERSION}.tar.gz
#ENV LOGSTASH_GID 992
#ENV LOGSTASH_UID 992
#ENV LOGSTASH_PATH_CONF /etc/logstash
#ENV LOGSTASH_PATH_SETTINGS ${LOGSTASH_HOME}/config
#RUN mkdir ${LOGSTASH_HOME} \
# && curl -O https://artifacts.elastic.co/downloads/logstash/${LOGSTASH_PACKAGE} \
# && tar xzf ${LOGSTASH_PACKAGE} -C ${LOGSTASH_HOME} --strip-components=1 \
# && rm -f ${LOGSTASH_PACKAGE} \
# && groupadd -r logstash -g ${LOGSTASH_GID} \
# && useradd -r -s /usr/sbin/nologin -d ${LOGSTASH_HOME} -c "Logstash service user" -u ${LOGSTASH_UID} -g logstash logstash \
# && mkdir -p /var/log/logstash ${LOGSTASH_PATH_CONF}/conf.d \
# && chown -R logstash:logstash ${LOGSTASH_HOME} /var/log/logstash ${LOGSTASH_PATH_CONF}
#ADD ./logstash-init /etc/init.d/logstash
#RUN sed -i -e 's#^LS_HOME=$#LS_HOME='$LOGSTASH_HOME'#' /etc/init.d/logstash \
# && chmod +x /etc/init.d/logstash
### install Kibana
ENV KIBANA_VERSION ${ELK_VERSION}
ENV KIBANA_HOME /opt/kibana
ENV KIBANA_PACKAGE kibana-${KIBANA_VERSION}-linux-x86_64.tar.gz
ENV KIBANA_GID 993
ENV KIBANA_UID 993
RUN mkdir ${KIBANA_HOME} \
&& curl -O https://artifacts.elastic.co/downloads/kibana/${KIBANA_PACKAGE} \
&& tar xzf ${KIBANA_PACKAGE} -C ${KIBANA_HOME} --strip-components=1 \
&& rm -f ${KIBANA_PACKAGE} \
&& groupadd -r kibana -g ${KIBANA_GID} \
&& useradd -r -s /usr/sbin/nologin -d ${KIBANA_HOME} -c "Kibana service user" -u ${KIBANA_UID} -g kibana kibana \
&& mkdir -p /var/log/kibana \
&& chown -R kibana:kibana ${KIBANA_HOME} /var/log/kibana
ADD ./kibana-init /etc/init.d/kibana
RUN sed -i -e 's#^KIBANA_HOME=$#KIBANA_HOME='$KIBANA_HOME'#' /etc/init.d/kibana \
&& chmod +x /etc/init.d/kibana
###############################################################################
# CONFIGURATION
###############################################################################
### configure Elasticsearch
ADD ./elasticsearch.yml ${ES_PATH_CONF}/elasticsearch.yml
ADD ./elasticsearch-default /etc/default/elasticsearch
RUN cp ${ES_HOME}/config/log4j2.properties ${ES_HOME}/config/jvm.options \
${ES_PATH_CONF} \
&& chown -R elasticsearch:elasticsearch ${ES_PATH_CONF} \
&& chmod -R +r ${ES_PATH_CONF}
### configure Logstash
# filters
#ADD ./01-tcp-json-input.conf ${LOGSTASH_PATH_CONF}/conf.d/01-tcp-json-input.conf
#ADD ./10-json.conf ${LOGSTASH_PATH_CONF}/conf.d/10-json.conf
#ADD ./30-output.conf ${LOGSTASH_PATH_CONF}/conf.d/30-output.conf
# Fix permissions
#RUN chmod -R +r ${LOGSTASH_PATH_CONF}
### configure Filebeat
#config
#ADD ./filebeat.yml ${FILEBEAT_PATH_CONF}/conf.d/filebeat.yml
#RUN chmod 644 ${FILEBEAT_PATH_CONF}/conf.d/filebeat.yml
### configure logrotate
#ADD ./logstash-logrotate /etc/logrotate.d/logstash
ADD ./elasticsearch-logrotate /etc/logrotate.d/elasticsearch
#ADD ./filebeat-logrotate /etc/logrotate.d/filebeat
ADD ./kibana-logrotate /etc/logrotate.d/kibana
RUN chmod 644 /etc/logrotate.d/elasticsearch \
&& chmod 644 /etc/logrotate.d/kibana
# && chmod 644 /etc/logrotate.d/filebeat
# && chmod 644 /etc/logrotate.d/logstash \
### configure Kibana
ADD ./kibana.yml ${KIBANA_HOME}/config/kibana.yml
###############################################################################
# START
###############################################################################
ADD ./start.sh /usr/local/bin/start.sh
RUN chmod +x /usr/local/bin/start.sh
#9300
#9200
EXPOSE 5601
VOLUME /var/lib/elasticsearch
CMD [ "/usr/local/bin/start.sh" ]